Static task
static1
Behavioral task
behavioral1
Sample
784233bc80ea7857c39dbcd9c929a626093fced8c54224e742c4d0e1d128e80d.exe
Resource
win7-20240221-en
General
-
Target
1bba5f14afdda2ed9ace0d18b91cbefce0be2db13d1bc6703f67447053b87701
-
Size
626KB
-
MD5
5f878455665515608cb782a02eb20681
-
SHA1
6436c7a2bb37456da0095c57c418aa3a5f19102e
-
SHA256
1bba5f14afdda2ed9ace0d18b91cbefce0be2db13d1bc6703f67447053b87701
-
SHA512
8f92eeb1d2699cfad087a1df160402f16dc610bc0575380d09cf84f434a3c15fb5d0304bd4afb4030afc6e68421c83ad8b6c6e361d0770daf9c0b0edf0ce050e
-
SSDEEP
12288:LokNmsnUmPw4jAjUAsDK7r0P7D4qbFrjY9lkjd93fhZUKBsTZ0+mF/fIu2wiwn/X:Mwm2NwWAjnMPv4irjY9li35ZUwF/A8/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/784233bc80ea7857c39dbcd9c929a626093fced8c54224e742c4d0e1d128e80d.exe
Files
-
1bba5f14afdda2ed9ace0d18b91cbefce0be2db13d1bc6703f67447053b87701.zip
Password: infected
-
784233bc80ea7857c39dbcd9c929a626093fced8c54224e742c4d0e1d128e80d.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ